From 1538630782ac8c56d549af4fcac4c9abcba8c9c5 Mon Sep 17 00:00:00 2001 From: tv Date: Fri, 19 Jun 2015 22:06:24 +0200 Subject: host rmdir: initial commit --- modules/rmdir/default.nix | 76 +++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 76 insertions(+) create mode 100644 modules/rmdir/default.nix (limited to 'modules/rmdir/default.nix') diff --git a/modules/rmdir/default.nix b/modules/rmdir/default.nix new file mode 100644 index 000000000..e514e5dad --- /dev/null +++ b/modules/rmdir/default.nix @@ -0,0 +1,76 @@ +{ pkgs, ... }: + +let + inherit (builtins) readFile; +in + +{ + imports = + [ + + ./iptables.nix + ./networking.nix + ./users.nix + ../common/nixpkgs.nix + ../tv/base.nix + ../tv/base-cac-CentOS-7-64bit.nix + ../tv/exim-smarthost.nix + ../tv/git/public.nix + ../tv/retiolum.nix + ../tv/sanitize.nix + ]; + + nix.maxJobs = 1; + + nixpkgs = { + url = "https://github.com/NixOS/nixpkgs"; + rev = "4c01e6d91993b6de128795f4fbdd25f6227fb870"; + }; + + environment.systemPackages = with pkgs; [ + git # required for ./deploy, clone_or_update + htop + iftop + iotop + iptables + mutt # for mv + nethogs + rxvt_unicode.terminfo + tcpdump + ]; + + security.rtkit.enable = false; + + services.cron.enable = false; + + services.journald.extraConfig = '' + SystemMaxUse=1G + RuntimeMaxUse=128M + ''; + + services.ntp.enable = false; + + services.openssh = { + enable = true; + hostKeys = [ + # XXX bits here make no science + { bits = 8192; type = "ed25519"; path = "/etc/ssh/ssh_host_ed25519_key"; } + ]; + permitRootLogin = "yes"; + }; + + services.retiolum = { + enable = true; + hosts = ; + privateKeyFile = "/etc/tinc/retiolum/rsa_key.priv"; + connectTo = [ + "cd" + "rmdir" + "fastpoke" + "pigstarter" + "ire" + ]; + }; + + sound.enable = false; +} -- cgit v1.2.3